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An asymmetric preparation of the quantum states sent through a noisy channel can enable a new 
way to monitor and actively compensate the channel noise. The paradigm of such an asymmetric 
treatment of quantum information is the Bennett 1992 protocol, in which the ratio between conclu- 
sive and inconclusive counts is in direct connection with the channel noise. Using this protocol as a 
guiding example, we show how to correct the phase drift of a communication channel without using 
reference pulses, interruptions of the quantum transmission or public data exchanges. 
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In recent years the field of Quantum Key Distribution 
(QKD) [T] has reached such a high degree of technical 
perfection that the emergence of unexplored directions 
in one of its oldest protocols, the Bennett 1992 [2], is 
somewhat surprising. The Bennett 1992 (B92) proto- 
col is based on only two quantum states, |<^o) and 
strictly nonorthogonal, to which are associated the two 
values of the logical bit communicated by the transmitter 
(Alice) to the receiver (Bob) This simple structure 
is one of the main advantages of the B92 protocol, which 
also features unconditional security [3] and suitability for 
long-distance communications [4j [5] . 

There is however another peculiarity of the B92 pro- 
tocol which has not been considered so far and yet it 
represents a useful resource in the field of quantum in- 
formation, i.e. the asymmetric distribution of its signal 
states, |(/?o) and In the left inset of Fig. 1 we de- 

picted these states as two arrows lying on the equator of 
the Poincare sphere [5J at an angle from the horizontal 
axis (noiseless case). In this representation, orthogonal 
states are associated to antiparallel arrows, to allow for 
a one-to-one map between a generic quantum state and 
a single point of the Poincare sphere [B.. A symmetric 
distribution of the states would be if \ipo) and \ipi) were 
lying in opposite directions respect to the origin of the 
axes, antiparallel to each other. But then they would 
be orthogonal, and this can never happen in the B92 
protocol. Hence the distribution of the signal states is 
necessarily asymmetric for this protocol. 

It turns out that this kind of asymmetry has its own 
advantages if adequately exploited. In the B92 protocol 
Bob performs a measurement of the incoming states and 
divides the results into two main groups, labeled as con- 
clusive and inconclusive. The ratio of these two sets of 
data is directly related to the noise of the channel thus 
allowing Bob to quantify and correct it. 

In the following, we apply this method to correct the 
phase drift of a communication channel. The method can 
be easily generalized to include other sources of noise, e.g. 
that due to the birefringence of an optical fiber affecting 
the polarization of a light pulse. The phase drift model is 




FIG. 1: States of the B92 protocol with a characteris- 
tic angle 9 = (15°). Left : channel without phase-drift, 
e — 0. Center : channel with a phase-drift of e = ? (45°). 
Right: channel with a phase-drift of e = — •jgW (—70°). The 
phase-drift rotates the reference system during the transfer of 
the quantum states from the transmitter to the receiver [7j. 



sketched in Fig. 1: in the left illustration the signal states 
reach the receiver without being affected by the noise; 
on the contrary, in the central and right illustrations, the 
states are rotated by an angle e about the central axis 
and Bob's measurement will consequently contain some 
errors. We call e the misalignment angle. 

Although the phase drift model can appear naive, it 
applies to a vast number of QKD setups, precisely to all 
those in which the information is encoded in the rela- 
tive phase of a photon passing through an unbalanced 
interferometer [HE]. To show how relevant it is and to 
facilitate a comparison between our proposal and exist- 
ing solutions, we give in the next a brief overview of the 
main techniques used to compensate the phase drift. 

One popular solution is to multiplex in the same chan- 
nel the quantum signals, e.g. single-photon pulses or 
attenuated laser pulses, and the classical ones, e.g. in- 
tense light-pulses [HI IH] • In this way a technique already 
employed in classical communications is adapted to the 
quantum realm, but carries a few drawbacks though. 
First, it has been recently shown that nonlinear effects 
due to the propagation of intense light pulses in optical 
fibers can generate noise in the sensitive single-photon de- 
tectors, thus limiting in practice the maximum distance 
of a fiber-based QKD [TU]. Second, the co-existence in 
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the same channel of dim and bright pulses makes it hard 
to control the intensity of the incoming light, and this 
can be exploited by an eavesdropper to hack the QKD 
system [llj . Finally this technique requires additional 
hardware to be implemented. 

A similar analysis holds for those systems which use 
a two-way configuration to enable a passive compensa- 
tion of the phase-drift [12]. Indeed the pulse sent in 
the forward direction is necessarily intense, thus causing 
Rayleigh backscattering and opening the door to an in- 
terrogation attack [13]. Moreover, this technique cannot 
be employed with a single-photon source, even if some 
attempts have been done in this direction |14) . 

There also exist solutions which employ quantum sig- 
nals only. In one case [15] the quantum transmission is in- 
terrupted and a sequence of quantum signals with a fixed 
phase value acting as a reference is sent by the transmit- 
ter along the channel until the receiver announces that 
the alignment has been completed . In another case [16] 
the quantum signals with a fixed phase value are inserted 
in the communication using a different wavelength, like in 
the classical frequency-multiplexing technique. Both of 
these solutions have some disadvantages. In the former, 
the interruption of the quantum transmission represents 
an idle cycle from which no secure bit can be distilled; 
moreover this technique is not adaptive, i.e. the system 
cannot adapt the interruption frequency to the real noise 
present on the channel. In the latter, the presence of 
an extra wavelength implies that single-photon detectors 
and electronics must deal with two wavelengths rather 
than one, thus increasing the complexity of the setup 
and reducing the key generation rate due to the fewer 
detector's windows available for the signal states. 

Our solution represents an alternative way to control 
the channel noise at the quantum level without any of 
the above drawbacks. The necessary resources for the 
control are borrowed from the asymmetry of the same 
signals used for the very QKD process. So there is no 
need to multiplex quantum signal with suitably tailored 
bright or reference pulses, or to interrupt the quantum 
communication at all. 

To explain in detail how the compensation technique 
works it is useful to recall the B92 protocol encoding- 
decoding mechanism [2] . Let us write explicitly the quan- 
tum states of the protocol: 

\<Pj) = p\O x ) + (-iya\l x ), (1) 
W 3 ) = a|0 x ) - (-1)^|U. (2) 

In the above equation \ipj) are the signal states of the 
protocol and \<pj) are the states orthogonal to them, with 
j = {0, 1}; 10^) and ll^) are the eigenstates of the Pauli 
operator X; (3 = \J\ — a 2 — cos(#/2) and 9 belongs to 
the open interval (0, ir/2). 

To start the communication, Alice chooses at random 
the value of the bit j, encodes it in the corresponding 
state and transmits it to Bob. The resulting density 



matrix p prepared by Alice is then: 

P = (bo)y?o| + |Vi)(^i|) / 2 

= I3 2 \0 x )(0 x \+a 2 \l x )(l x \. (3) 

It can be easily verified that the above density ma- 
trix is asymmetric because it is not proportional to 
the identity operator in the 2-dimension Hilbert space, 
1= |0 X )(0 X | + This is a consequence of the strict 

nonorthogonality of the B92 protocol states. To decode 
the information, Bob measures the incoming states in the 
basis Bfc = {|<^fe), 1^.)}, k = {0, 1}. Upon obtaining the 
state \Tp k ) 1 Bob decodes Alice's bit as j = k(B 1 (the sym- 
bol © means "addition modulo 2") and labels the result 
as conclusive; on the contrary, upon obtaining the state 
\(fk), Bob is not able to decode Alice's bit deterministi- 
cally, and simply labels the result as inconclusive. For 
example, if Bob detects the state |^ ), then he can say 
with certainty that the prepared state was |</?i), because 
\(po) is orthogonal to the detected state. The same is 
true for the detection of l^x), which indicates that \ipa) 
was prepared. These are examples of conclusive results. 
On the contrary, if Bob detects the state \ifio), he will 
not be able to deterministically infer Alice's preparation, 
because that state has a nonzero probability to come ei- 
ther from |^?o) or from \ipi). Hence this is an example of 
inconclusive result. 

The heart of our technique is that the asymmetric 
density matrix of Eq.([3]) produces different amounts of 
conclusive and inconclusive results in Bob's measure. In 
particular the ratio between inconclusive and conclusive 
counts is a function of the angle 9, known to the users, 
and of the noise. Bob can estimate it during the quan- 
tum transmission thus obtaining, in real time, informa- 
tion about the noise, useful to eventually compensate it. 

To establish the connection with the noise, let us con- 
sider a communication channel affected by the phase-drift 
model of noise (Fig. 1). In this case the density ma- 
trix seen by Bob is no more the one given by Eq. ^ but 
rather a new matrix p composed by the noise- affected 
quantum states \>fo) and These states can be ob- 

tained by rotating those of Eq.Q through the operator 
U £ = exp (i|Y), with Y the usual Pauli operator and e 
the misalignment angle: 

|0o) = cos[(0 + e)/2]|O B )+ffln[(0 + e)/2]|l,), (4) 
= cos[{9-e)/2]\0 x )-sm[(9-e)/2]\l x ). (5) 

From the density matrix p is then possible to calculate 
the various probabilities associated to Bob's measure- 
ment. To make our description more realistic we intro- 
duce the quantity n, which is the probability to detect 
a single-photon state, i.e. a state different from a vac- 
uum or a multi-photon state. It can be thought as a 
sort of total transmission of the QKD setup, including 
the transmission of the communication channel, rjc, the 
efficiency of Bob's detectors, t/b, and the probability of 
double clicks in Bob's detectors [3]. With this in mind, we 
write down the probability that Bob gets an inconclusive 
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outcome, PJf 10 

neon 



rj ((pk\ p \<Pk)i 01 a conclusive outcome, 
V (<Pk\ P~Wk)i when he measures in the basis B^.: 



P l k nc = r/{2 + cose + cos[2(9 

peon 



7]{2 — cose — cos [29 



(-l) k e}}/4 (6) 
(-l) k e}}/4. (7) 



The ratio Rk of the two above probabilities is indepen- 
dent of rj and is a crucial quantity, called control function: 



Rk{0,e) = 



- cose + cos[26> - (-l) fe e] 
■ cos[20 - \-l) k e] ' 



COS £ 



(8) 



A few examples of Rk are plotted in Fig. 2; the pa- 
rameters used to draw the curves are k = {0,1} and 
9 = {If , ? , Tp}. Among these curves, some are better 
than others to drive the noise-compensation mechanism. 
If the absolute value of Rk is too small, like for the curves 
with 9 = ^p, the system is less responsive i.e. big changes 
of e cause small changes of Rk- In this case the risk is that 
the misalignment angle becomes too large before Bob be- 
comes aware of it and applies the correction mechanism. 
On the contrary, the higher the Rk the fewer the con- 
clusive counts registered by Bob. This results in larger 
fluctuations in the estimation of Rk, thus worsening the 
compensation mechanism, as it happens for example to 
the curves featuring 8 = |^ in Fig. 2. So the best op- 
tion is to choose an intermediate value of 9 that at the 
same time provides Bob with a good statistics and a re- 
sponsive control. By consequence we choose 9 = | (60°) 
and plot in Fig. 2 the corresponding control functions to- 
gether with their tangents in the zero-noise point. Such 
a value of 9 is also interesting because it allows to merge 
in a single protocol the present technique and that de- 
scribed in [5] , that is an efficient long-distance version of 
the B92 protocol featuring an optimal 9 of about 0.3-7T 
(precisely, 55.4° [5]). 

When the noise is small, the control functions of Eq. Q 
can be well approximated by their tangents in the zero- 
noise point; furthermore they are monotone, so only one 
control function, either Rq or R\, is sufficient to pro- 
vide a reliable estimation of e. This makes the feedback 
response very fast and we refer to this situation as to 
a "fast feedback". On the contrary, when the noise is 
large and falls outside the monotonicity range of the con- 
trol functions, Bob must use both the control functions 
to estimate unambiguously the misalignment angle e in 
the open interval (— 7r,7r). This procedure is intrinsically 
slower than the previous one, so we term it "slow feed- 
back". From a practical point of view, both the options 
are helpful. For example, at the beginning of a communi- 
cation the users' apparatuses are completely misaligned 
and e can be quite large; Bob will then use the slow feed- 
back to get a first estimation of s and compensate it; after 
that, when the boxes are nearly aligned, Bob will use the 
fast feedback to improve the alignment and maintain it 
during the remaining quantum transmission. 

At this point let us mention a possible experimen- 
tal implementation of the mechanism used to correct 
the noise. The QKD layout we are interested in is the 
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FIG. 2: Examples of control functions Rk(8,e) versus the 
misalignment angle e. The _Ro curves (Ri curves) reach their 
maximum in the right-part (left-part) of the figure. The figure 
shows that a given misalignment angle causes a correspondent 
value in the control functions. Bob can exploit this correspon- 
dence to measure the control functions and from that ascer- 
tain the value of the misalignment angle. 
The Rk(^,e) are drawn with solid lines; the Rk(jg,e) with 
empty circles; the Rk(^-,e) with empty squares. The tan- 
gents to -Rfc(f , e) in the zero-noise point are in dashed lines. 



one based on the relative-phase degree of freedom, in 
a one-way configuration. It is constituted by two iden- 
tical interferometers placed in Alice's and Bob's sta- 
tions 2J. Each of the interferometers features two un- 
equal paths which provide the traveling pulses with a 
different amount of optical phase. The phase difference 
can be easily modulated by the users, who are then able 
to encode information in this way. In particular, the 
output ports of the receiver's interferometer are usually 
connected with two detectors that determine the conclu- 
siveness or inconclusiveness of a certain result. 

To correct the noise, Bob executes his measurement for 
a while, registering all the results in a computer memory. 
Then, when a sufficient number of occurrences is avail- 
able, Bob estimates the control functions of Eq.Q and 
obtains a value of the misalignment angle e. The last 
thing Bob has to do is to recalibrate his phase-modulator 
with the obtained value to re-establish the correct align- 
ment of his apparatus with Alice's. The read-and-write 
procedure just described is performed by Bob in-course- 
of-action, and can be easily implemented by an electronic 
feedback loop in which the estimated value of Rk(9, s) is 
the input, the fixed value of Rk(9, 0) is the setpoint, and 
a function of these two quantities is the output. 

We have carried out numerical simulations of such an 
active feedback loop in the case of 9 = ^ and the re- 
sults are reported in Fig. 3. In the upper part of the 
figure we considered a linear increase in time of the mis- 
alignment angle, with a rate equal to 0.05 rad/sec. This 
value is easily attainable with some care in the shield- 
ing process of the users' interferometers against external 
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FIG. 3: Noise patterns and feedback responses versus time. 
Top: linear noise with a rate of 0.05 rad/sec (filled squares) 
and response after fast feedback is applied with a statistics 
of 5 x 10 3 events per point (empty circles). The mean angle 
after feedback is e^ st = (0.023 ± 0.031) rad. Bottom : step 
noise with amplitude 2 rad (filled squares) and response after 
slow feedback is applied with a statistics of 10 3 events per 
point (empty circles). Other parameters used are (see text): 
6 = f , / = 2 MHz, n = 0.5, f] B = 10%, r\c = 0.1. 



thermal fluctuations. Phase drift values reported in the 
literature are well below our threshold, e.g. 0.033 rad/sec 
in [15] or 0.0086 rad/sec in [16]. We have also assumed a 
trigger rate / = 2 MHz, an average photon number per 
pulse /i = 0.5, a detector efficiency r\B — 10%, a chan- 
nel transmittancc rjc = 0.1, equal to about 50 km of a 
standard optical fiber in the third Telecom window. Mul- 
tiplied together, these values provide Bob with a number 
of non- vacuum events per second of the order of 10 4 . Let 
us note that this represents a wide underestimation of the 
current QKD performances (see e.g. [II]). Each point of 
the plotted curves is the result of an average of 5 x 10 3 
acquisitions, obtained in practice by applying a feedback 
kick every half a second. Following the approach in [IB] , 
we have empirically verified the optimality of this value: 
if larger, the phase-drift would become too big in the be- 
tween of two consecutive feedback kicks; if smaller, the 
statistical error pertaining to Bob's measurement would 
increase considerably. The empty circles in the upper 
part of Fig. 3 show the response of the fast feedback 
loop, i.e. the one in which a linear approximation of the 
control functions is adopted. In particular we used the 
first-order expansion of i?o(f ,e) in £ = to drive the 
feedback. With feedback, the mean misalignment angle 
of the communication channel reduces to: 



fast 



(0.023 ±0.031) rad. 



(9) 



ation is well below the amount of phase-drift accumulated 
every second on the channel. 

In the lower part of Fig. 3 we have considered a phase- 
drift in the form of a step-function of amplitude equal to 
2 rad, to study the response of the slow feedback loop 
in the case of a large phase-drift. In this case Bob ex- 
ploits both i? (f,e) and Ri(^,e) to estimate the mis- 
alignment angle. After acquiring 10 3 events he evaluates 
the mean values of Rq and R\, let us term them and 
R\ . Then he numerically finds the point e* that mini- 
mizes the quantity |i? (f , e) - Rq\ + \Ri(f,e)-R* 1 \. He 
finally uses the value of e* to compensate the phase-drift. 
The empty circles of the figure again represent the value 
of the misalignment angle after the feedback has been ap- 
plied. It can be seen that in correspondence of the noise 
steps the angle seen by Bob undergoes strong jumps, but 
the system recovers immediately after the jump. If one 
ignores the jumps, the mean misalignment angle is: 

e alow = (_ .002 ± 0.098) rad. (10) 

Compared to Eq.([9|), the average value is nearly unbiased, 
following the unbiased behavior of the noise, while the 
standard deviation is more than three times bigger due 
to the reduced statistics adopted for this kind of feedback. 
It can be nice to note that the step-noise pattern of Fig. 3 
could be employed by the users to create an additional 
communication channel between them. More explicitly, 
Alice could purposely feed into her phase-modulator a 
large phase value in order to send some sort of message 
to Bob, like e.g. a string of bits useful to identify a certain 
part of the quantum transmission. 

As a last point of our work we want to establish 
whether the results of Eqs. ^ and ( flO| ) are good enough 
for a practical implementation of the B92 protocol. In 
particular we calculate the maximum misalignment an- 
gle for which the secure gain of the B92 protocol is still 
positive. The secure gain of a protocol is the ratio be- 
tween the number of secure bits distilled and the num- 
ber of qubits prepared by Alice. For the B92 protocol 



it is defined as G = A 
h the Shannon entropy, 
K-bit the bit-error rate and h p h 



: < con [1 

h rnr 



h(£^)], with 



Ant 

A con -> .""-A co .. 

the conclusive-count rate, 
the upper bound to the 



phase-error rate obtained from hut and h con through an 
optimization algorithm [31 [5] . 

The bit-error rate is given by the probability that Bob 
finds the state \Tp ) (|<^i)) when Alice prepares the or- 
thogonal state \<fo) (\<fii))- For the present discussion it 
suffices to assume that the phase-drift is the only source 
of errors; in reality there are also the detector dark counts 
and the unavoidable experimental imperfections. By us- 
ing the noisy states of Eqs. B and |5]), and assuming a 
preparation of the bit value (the same holds for the bit 
value 1), we obtain the following bit-error rate: 



h blt = v(\(<Po\Vo)\)/2 
= j] (1 — cose) /4. 



(11) 



The slight bias towards positive values is due to the 
monotone increase of the phase-drift. The standard devi- 



This expression is independent of 9 and correctly vanishes 
when e tends to zero. The coefficient r\ takes into account 
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the vacuum or multi-photon counts by Bob, while the 
factor 1/2 is the probability to guess the right basis to 
detect the error. 

In a similar way, the conclusive-count rate is given by 
the probability that Bob obtains a conclusive result, and 
can be evaluated from the mean value of P§ on and p™> n 



in Eq. 0: 



(p co7i +pr c )/2 



7/(1 



cos e cos' 



9)/2. 



(12) 



This time, there is a dependance on 8. After fixing 9 = | 
and using Eqs. ( 11 ) and ( 12 ), we have numerically found 



a positive gain for the B92 protocol until 



lei < 0.27646 rad. 



(13) 



The value of s given by the fast feedback, Eq. is much 
smaller than the above threshold. Hence our proposal 
appears feasible, especially if one considers that we made 
conservative assumptions on the QKD parameters and 
that less conservative assumptions would lead to better 
values in Eqs. ^ and (10). 



Let us point out that Eqs. (11) and (12) establish a 



direct dependance of the bit-error rate and conclusive- 
count rate on the misalignment angle e. This allows Bob 
to estimate K^t and K con without communicating with 



Alice. It suffices that Bob gets an estimate of e from 
his data and substitutes it into the given equations |18) . 
This is a further peculiarity of the B92 protocol that 
remained unnoticed so far. It can considerably increase 
the practicality of the protocol by reducing the classical 
communication necessary to distill the final key. 

In conclusion, we introduced a novel scheme to detect 
and correct the phase-drift of a communication channel 
based on some characteristics of the B92 protocol not 
considered so far. The scheme features a few remarkable 
properties: it is entirely quantum, it can be executed real- 
time without interrupting the communication, it allows 
to estimate the bit-error rate without a bidirectional com- 
munication, it creates additional communication chan- 
nels for the users. This highly increases the practicality 
of the B92 protocol, often considered unsuitable for real- 
world implementations. Furthermore, the fully quantum 
nature of the scheme on one side reduces the noise due to 
the propagation of high-intensity light pulses in a nonlin- 
ear medium, on the other makes it conceivable the con- 
struction of networks and devices working entirely at the 
quantum level, thus preventing several hacking strate- 
gies available to Eve. The asymmetry-based correction 
mechanism can be extended to the polarization degree of 
freedom and can play a role in the entanglement distri- 
bution problem. 
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